debian-packaging
/
linux
8
0
Fork 0
Code Releases Activity

linux-image: Recommend apparmor (Closes: #880441) 

The apparmor package is needed for loading profiles.  In theory,
enabling AppArmor without any profiles loaded should do nothing, so
this is not really a dependency of the kernel.  However, if a systemd
unit specifies a AppArmor profile and the kernel has AppArmor enabled
then failure to load the profile is fatal.

As the linux-image packages select AppArmor as the default LSM, they
should probably also be responsible for getting the necessary userland
support installed.  But since the default can be overridden, use
Recommends rather than Depends.
This commit is contained in:
Ben Hutchings 2017-11-05 01:54:12 +00:00
parent 43a5e411fd
commit bd1e10f8bd
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
debian/changelog vendored
View File

@ -52,6 +52,10 @@ linux (4.13.11-1) UNRELEASED; urgency=medium
Thanks to Andrew Chadwick (Closes: #880504)
* netfilter: nft_set_hash: disable fast_ops for 2-len keys (Closes: #880145)
[ Ben Hutchings ]
* linux-image: Recommend apparmor, as systemd units with an AppArmor
profile will fail without it (Closes: #880441)
-- Salvatore Bonaccorso <carnil@debian.org> Sat, 04 Nov 2017 09:54:41 +0100
linux (4.13.10-1) unstable; urgency=medium

1
debian/config/defines vendored
View File

@ -118,6 +118,7 @@ part-long-xen: This kernel also runs on a Xen hypervisor.
[image]
initramfs-generators: initramfs-tools initramfs-fallback
recommends: apparmor
[relations]
# compilers